There Is No Free Phish: An Analysis of "Free" and Live Phishing Kits

111 citations recorded by the source corpus.

How researchers see this paper

The researchers whose trusted networks rank it highest, strongest advocate first. Every researcher gets a different order.

DeltaPhish: Detecting Phishing Webpages in Compromised Websites (2017, background): “To maximize proﬁt, as most of the current cyber-crime activities, modern phishing attacks are automatically deployed on a large scale, exploiting vulnerabilities in publicly-available websites through the so-called phishing kits [4, 5, 6, 7, 8].”
PhishEye: Live Monitoring of Sandboxed Phishing Kits (2016, background): “Our study presents accurate measurements of the duration and effectiveness of this popular threat, and discusses many new and interesting aspects we observed by monitoring hundreds of phishing campaigns.”
A Hierarchical Adaptive Probabilistic Approach for Zero Hour Phish Detection (2010, methodology): “For example, Cova et al [11] identified 584 phishing kits during a period of two months starting in April 2008, all of which were written in PHP.”
Discovering phishing dropboxes using email metadata (2012, background): “investigated kits and found that many of the ‘free’ kits contained back doors that would deliver credentials to the kit creator as well as to the criminal that had deployed it [1].”